$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft File: 5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft (raw, json) Hash identifier: bkOgqNwx+HLqDANl7rNwd0fFGnZjR0H/ZDrTR8fla9Q= Subject key identifier: 18:AC:D6:56:C6:D7:A7:24:FA:C8:28:6B:B8:4A:97:8F:5C:8C:6B:9A Authority key identifier: 5F:A8:87:D4:C4:22:96:4F:B6:8C:DD:87:7D:9A:B4:17:36:0C:2E:B5 Certificate issuer: /CN=5FA887D4C422964FB68CDD877D9AB417360C2EB5 Certificate serial: 7DC3021A5E714DC65F22AEBEAD5FADE397694910 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FA887D4C422964FB68CDD877D9AB417360C2EB5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 14:53:17 +0000 Manifest this update: Sat 26 Sep 2026 14:48:17 +0000 Manifest next update: Sun 27 Sep 2026 16:27:17 +0000 Files and hashes: 1: 3130332e3133362e342e302f32322d3234203d3e203338333230.roa (hash: opi4UEK669uRcBpJCe+2Ayk5Lle5+nKJNqzpjbTh2ik=) 2: 5FA887D4C422964FB68CDD877D9AB417360C2EB5.crl (hash: sLvuI1cFvFrjTpchy74ylxnc+UzbLRpyyObpK1a1kpI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.crl rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FA887D4C422964FB68CDD877D9AB417360C2EB5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:c3:02:1a:5e:71:4d:c6:5f:22:ae:be:ad:5f:ad:e3:97:69:49:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FA887D4C422964FB68CDD877D9AB417360C2EB5 Validity Not Before: Sep 26 14:48:17 2026 GMT Not After : Sep 27 16:27:17 2026 GMT Subject: CN=18ACD656C6D7A724FAC8286BB84A978F5C8C6B9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:68:1c:c3:d6:12:ee:77:4a:92:6f:5b:09:1f: 14:f8:f0:1f:fa:6b:e5:61:d2:4e:e9:6d:41:31:6a: b1:cc:3c:30:41:69:b9:51:9d:b5:9d:24:a3:5e:b2: aa:39:a4:a7:41:ef:3d:42:c3:a4:5b:41:1c:be:f6: f6:bd:b4:29:10:bc:18:07:f2:b3:8d:00:20:ce:51: 0a:35:29:0a:19:a5:01:ba:ab:0b:b0:0d:fa:40:ed: 5a:54:cf:a7:7f:4d:a3:c3:c1:1f:ee:1b:17:de:be: 88:f0:81:59:b1:2b:a9:e5:ae:20:58:a5:c5:b7:8d: 96:c6:30:cd:77:1f:be:c8:1b:bc:14:d5:87:49:71: 45:a5:10:49:e6:e5:dc:8f:24:bf:17:7a:ab:c9:fd: 87:9a:8c:20:fd:8c:ca:cb:b5:29:c8:6d:23:21:8a: 08:e5:84:7f:1d:3f:9c:d2:9a:dd:20:a9:8f:ea:17: 7f:78:41:ff:0e:f4:68:ac:8f:5c:0d:e7:09:51:76: 5a:83:ee:ba:f7:ee:6d:c0:20:79:a8:24:63:ca:31: 8f:af:35:88:f5:a4:bb:7b:49:59:18:fc:31:be:cd: f4:d6:e7:e3:24:d1:4f:fc:ca:80:12:8e:10:51:d0: 8a:2d:9a:51:66:1d:19:27:a8:5a:bc:8a:ee:6f:2f: 5f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:AC:D6:56:C6:D7:A7:24:FA:C8:28:6B:B8:4A:97:8F:5C:8C:6B:9A X509v3 Authority Key Identifier: keyid:5F:A8:87:D4:C4:22:96:4F:B6:8C:DD:87:7D:9A:B4:17:36:0C:2E:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FA887D4C422964FB68CDD877D9AB417360C2EB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:39:29:9d:bb:14:79:8c:82:bb:dc:5a:5c:c2:f8:36:75:57: 59:4f:bb:81:72:9b:64:70:f9:2a:5b:04:86:fe:d8:cf:ad:e1: 83:ee:9e:a7:dd:7e:7e:da:a8:78:a4:92:f9:3f:99:42:57:79: f9:07:79:e2:1a:04:fa:3c:91:dc:bb:c6:7f:c6:3f:ce:9d:4c: 17:10:2b:e1:0b:d7:6c:b0:1e:83:3f:b0:c6:e8:9b:cc:df:34: de:8d:83:03:cc:3c:05:f3:d6:3b:cc:46:18:3a:fb:49:78:85: 39:af:b3:d9:f1:d9:c9:04:5c:42:96:51:ca:08:17:09:bc:83: 41:46:57:66:9c:f5:58:7d:17:db:e7:78:c9:46:1d:53:91:77: a0:3a:95:5d:50:fd:6a:69:c6:dd:62:1a:c7:3e:f9:8a:5c:a5: 57:90:ac:e7:98:e4:23:0b:ec:13:cf:87:5a:09:2e:13:f1:06: 0c:29:88:48:d1:28:4b:22:1c:49:2d:6c:45:99:ff:74:f5:14: 5a:25:f1:f4:ee:bf:5b:2f:87:6d:5b:d9:5a:6d:a8:7f:16:73: 3d:04:7b:11:cf:1a:76:e5:57:29:e7:68:e9:90:fd:dc:4c:29: f6:9f:8c:26:42:e1:28:cc:31:70:a3:19:6c:c1:f4:ae:31:37: db:20:82:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfcMCGl5xTcZfIq6+rV+t45dpSRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZBODg3RDRDNDIyOTY0RkI2OENERDg3N0Q5QUI0MTcz NjBDMkVCNTAeFw0yNjA5MjYxNDQ4MTdaFw0yNjA5MjcxNjI3MTdaMDMxMTAvBgNV BAMTKDE4QUNENjU2QzZEN0E3MjRGQUM4Mjg2QkI4NEE5NzhGNUM4QzZCOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGaBzD1hLud0qSb1sJHxT48B/6 a+Vh0k7pbUExarHMPDBBablRnbWdJKNesqo5pKdB7z1Cw6RbQRy+9va9tCkQvBgH 8rONACDOUQo1KQoZpQG6qwuwDfpA7VpUz6d/TaPDwR/uGxfevojwgVmxK6nlriBY pcW3jZbGMM13H77IG7wU1YdJcUWlEEnm5dyPJL8XeqvJ/YeajCD9jMrLtSnIbSMh igjlhH8dP5zSmt0gqY/qF394Qf8O9Gisj1wN5wlRdlqD7rr37m3AIHmoJGPKMY+v NYj1pLt7SVkY/DG+zfTW5+Mk0U/8yoASjhBR0IotmlFmHRknqFq8iu5vL19FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGKzWVsbXpyT6yChruEqXj1yMa5owHwYDVR0j BBgwFoAUX6iH1MQilk+2jN2HfZq0FzYMLrUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWM0NWMyMmMtMjc1Yi00Mjk1LWI0NTMtNjBhNzgzYjljNDJhLzAvNUZBODg3RDRD NDIyOTY0RkI2OENERDg3N0Q5QUI0MTczNjBDMkVCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkE4ODdENEM0MjI5NjRGQjY4Q0REODc3RDlBQjQxNzM2MEMy RUI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWM0NWMyMmMtMjc1Yi00Mjk1LWI0 NTMtNjBhNzgzYjljNDJhLzAvNUZBODg3RDRDNDIyOTY0RkI2OENERDg3N0Q5QUI0 MTczNjBDMkVCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQ5KZ27FHmMgrvcWlzC+DZ1V1lPu4Fym2Rw +SpbBIb+2M+t4YPunqfdfn7aqHikkvk/mUJXefkHeeIaBPo8kdy7xn/GP86dTBcQ K+EL12ywHoM/sMbom8zfNN6NgwPMPAXz1jvMRhg6+0l4hTmvs9nx2ckEXEKWUcoI Fwm8g0FGV2ac9Vh9F9vneMlGHVORd6A6lV1Q/Wppxt1iGsc++YpcpVeQrOeY5CML 7BPPh1oJLhPxBgwpiEjRKEsiHEktbEWZ/3T1FFol8fTuv1svh21b2VptqH8Wcz0E exHPGnblVynnaOmQ/dxMKfafjCZC4SjMMXCjGWzB9K4xN9sgghM= -----END CERTIFICATE-----Generated at Sat Sep 26 18:33:51 2026 by rpki-client